Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
File: AS137266.roa (raw, json)
Hash identifier: TIS10nTsAOSrzyuLl5q3KBcB5z3khoeWyELYnVBXVYs=
Subject key identifier: BB:1C:D2:76:C0:33:02:F7:20:70:D6:F2:4A:2B:FE:BA:86:F6:20:20
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 72B8D685FD762C442BC3FF7AF9447F9B4EBB7CF0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
Signing time: Thu 04 Jun 2026 16:14:05 +0000
ROA not before: Thu 04 Jun 2026 16:09:05 +0000
ROA not after: Thu 03 Jun 2027 16:14:05 +0000
asID: 137266
IP address blocks: 27.16.129.0/24 maxlen: 24
27.16.130.0/23 maxlen: 23
27.16.132.0/22 maxlen: 22
27.16.144.0/22 maxlen: 22
27.16.148.0/22 maxlen: 22
27.16.152.0/22 maxlen: 22
27.16.160.0/22 maxlen: 22
27.16.172.0/22 maxlen: 22
27.16.180.0/22 maxlen: 22
27.16.184.0/22 maxlen: 22
27.16.188.0/22 maxlen: 22
27.16.196.0/22 maxlen: 22
27.16.200.0/21 maxlen: 21
27.16.208.0/22 maxlen: 22
27.16.212.0/22 maxlen: 22
27.16.216.0/22 maxlen: 22
27.16.220.0/22 maxlen: 22
27.16.224.0/22 maxlen: 22
27.16.232.0/22 maxlen: 22
27.16.236.0/22 maxlen: 22
27.16.252.0/24 maxlen: 24
27.17.64.0/22 maxlen: 22
27.17.70.0/23 maxlen: 23
27.17.72.0/22 maxlen: 22
27.17.76.0/23 maxlen: 23
27.17.78.0/23 maxlen: 23
27.17.80.0/20 maxlen: 20
27.17.96.0/20 maxlen: 20
27.17.112.0/21 maxlen: 21
27.17.120.0/22 maxlen: 22
27.17.140.0/24 maxlen: 24
27.17.142.0/23 maxlen: 23
27.17.144.0/20 maxlen: 20
27.17.160.0/19 maxlen: 19
27.17.192.0/19 maxlen: 19
27.17.224.0/19 maxlen: 19
27.18.0.0/17 maxlen: 17
27.18.128.0/17 maxlen: 17
27.19.0.0/18 maxlen: 18
27.19.64.0/19 maxlen: 19
27.19.92.0/22 maxlen: 22
27.19.100.0/22 maxlen: 22
27.19.104.0/22 maxlen: 22
27.19.108.0/22 maxlen: 22
27.19.116.0/22 maxlen: 22
27.19.120.0/21 maxlen: 21
27.19.132.0/22 maxlen: 22
27.19.140.0/22 maxlen: 22
27.19.144.0/20 maxlen: 20
27.19.160.0/21 maxlen: 21
27.19.172.0/22 maxlen: 22
27.19.176.0/22 maxlen: 22
27.19.180.0/22 maxlen: 22
27.19.184.0/21 maxlen: 21
27.19.196.0/22 maxlen: 22
27.19.200.0/21 maxlen: 21
27.19.208.0/21 maxlen: 21
27.19.216.0/22 maxlen: 22
27.19.224.0/22 maxlen: 22
27.19.228.0/22 maxlen: 22
27.19.232.0/22 maxlen: 22
27.19.236.0/22 maxlen: 22
59.172.156.0/22 maxlen: 22
59.174.84.0/22 maxlen: 22
111.175.40.0/22 maxlen: 22
111.175.60.0/22 maxlen: 22
119.98.0.0/20 maxlen: 20
119.98.16.0/21 maxlen: 21
119.98.32.0/19 maxlen: 19
119.98.64.0/18 maxlen: 18
119.98.128.0/18 maxlen: 18
119.98.196.0/22 maxlen: 22
119.98.200.0/21 maxlen: 21
119.98.208.0/22 maxlen: 22
119.98.224.0/20 maxlen: 20
119.98.240.0/21 maxlen: 21
119.98.248.0/23 maxlen: 23
121.60.116.0/22 maxlen: 22
171.83.0.0/18 maxlen: 18
171.83.64.0/18 maxlen: 18
171.83.88.0/22 maxlen: 22
171.113.0.0/18 maxlen: 18
171.113.64.0/18 maxlen: 18
171.113.128.0/18 maxlen: 18
171.113.192.0/18 maxlen: 18
219.140.112.0/22 maxlen: 22
221.235.251.0/24 maxlen: 24
240e:368:1419::/48 maxlen: 48
240e:368:141a::/48 maxlen: 48
240e:368:141b::/48 maxlen: 48
240e:368:141c::/48 maxlen: 48
240e:368:160c::/48 maxlen: 48
240e:368:160d::/48 maxlen: 48
240e:36e:1600::/40 maxlen: 40
240e:36e:1700::/40 maxlen: 40
240e:36f:15a0::/44 maxlen: 44
240e:36f:15b0::/44 maxlen: 44
240e:36f:15c0::/44 maxlen: 44
240e:36f:15d0::/44 maxlen: 44
240e:669:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b8:d6:85:fd:76:2c:44:2b:c3:ff:7a:f9:44:7f:9b:4e:bb:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 4 16:09:05 2026 GMT
Not After : Jun 3 16:14:05 2027 GMT
Subject: CN=BB1CD276C03302F72070D6F24A2BFEBA86F62020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:79:21:a1:5a:12:a2:c3:cf:1d:91:4b:ac:
f2:3e:38:fd:fa:d0:85:08:6d:5b:fb:db:11:9f:84:
0f:ae:01:16:a6:61:ff:51:e4:60:07:e6:59:0a:3e:
6a:d2:77:d8:15:e7:5d:de:18:69:e4:72:cf:7d:7c:
b0:42:29:0e:33:da:f3:96:a7:65:b9:37:74:62:21:
44:4d:26:19:ab:f0:fa:3b:86:43:6a:ee:27:62:fb:
a3:c6:30:ff:24:94:73:e5:6a:02:24:3c:cc:05:4f:
67:c1:5f:aa:8e:61:8c:15:80:f9:10:ea:84:3c:bb:
85:c8:0e:17:30:76:43:61:8b:a9:ca:55:86:c1:b4:
fb:6a:b6:f5:54:cf:c2:b6:8d:d9:16:43:0c:4a:cc:
87:1b:3b:4c:95:10:0e:3c:42:0a:bd:fb:b0:17:8c:
0f:9f:d3:6c:df:9c:e2:e7:51:9e:7c:d0:be:29:23:
d2:a8:60:90:42:98:26:63:54:9b:a9:2e:35:d9:1d:
6f:c9:f8:70:69:9d:cd:8b:ef:7b:75:6a:56:a0:c8:
47:40:f6:60:b1:1a:a6:05:f3:de:c4:29:6a:e2:e4:
a7:e1:02:63:45:c1:35:26:a1:ad:f3:fe:89:98:23:
f1:46:dd:b3:dc:b0:44:af:fa:70:17:bc:1c:da:f5:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:D2:76:C0:33:02:F7:20:70:D6:F2:4A:2B:FE:BA:86:F6:20:20
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.16.129.0-27.16.135.255
27.16.144.0-27.16.155.255
27.16.160.0/22
27.16.172.0/22
27.16.180.0-27.16.191.255
27.16.196.0-27.16.227.255
27.16.232.0/21
27.16.252.0/24
27.17.64.0/22
27.17.70.0-27.17.123.255
27.17.140.0/24
27.17.142.0-27.19.95.255
27.19.100.0-27.19.111.255
27.19.116.0-27.19.127.255
27.19.132.0/22
27.19.140.0-27.19.167.255
27.19.172.0-27.19.191.255
27.19.196.0-27.19.219.255
27.19.224.0/20
59.172.156.0/22
59.174.84.0/22
111.175.40.0/22
111.175.60.0/22
119.98.0.0-119.98.23.255
119.98.32.0-119.98.191.255
119.98.196.0-119.98.211.255
119.98.224.0-119.98.249.255
121.60.116.0/22
171.83.0.0/17
171.113.0.0/16
219.140.112.0/22
221.235.251.0/24
IPv6:
240e:368:1419::-240e:368:141c:ffff:ffff:ffff:ffff:ffff
240e:368:160c::/47
240e:36e:1600::/39
240e:36f:15a0::-240e:36f:15df:ffff:ffff:ffff:ffff:ffff
240e:669:8000::/48
Signature Algorithm: sha256WithRSAEncryption
50:d0:e3:d2:a7:b2:a6:10:73:41:ba:06:db:8f:a7:6a:3a:ea:
2b:81:37:63:22:0a:d9:cc:71:0c:d8:cb:7c:be:b4:0f:d1:72:
c2:a4:d5:ba:6b:eb:0f:a8:6b:92:f7:8d:37:f6:f3:6f:fa:be:
ab:2a:06:e0:33:46:cd:87:24:10:79:c8:4d:7d:96:0a:92:48:
94:86:53:28:d8:f3:3d:03:a7:0a:ed:53:11:6c:95:1e:41:c0:
06:7f:b1:f8:5a:93:3b:b2:2b:99:c7:62:b3:97:02:0e:13:18:
51:d9:95:c2:1d:6b:de:96:34:d9:5c:3a:68:10:fe:d6:7c:ae:
54:3f:4f:1a:c7:90:52:cd:df:d5:9b:4d:74:88:37:e9:ba:57:
76:6d:49:98:d3:9b:7c:30:ba:ec:b9:ac:e0:14:dc:b5:c2:ee:
ac:9e:57:35:63:a1:eb:df:06:fc:8d:94:1c:53:4f:27:24:4f:
b6:19:5f:f5:59:6b:48:7e:34:dd:e9:08:2b:22:1d:60:8f:31:
fc:53:51:8e:f2:42:6b:c8:66:ca:c4:1b:cc:4d:12:7a:01:7f:
6b:b5:d0:fe:6c:57:e7:0c:2e:74:49:6f:99:dc:d6:f6:d3:3a:
fb:27:21:dd:0f:a4:dd:48:51:b2:0a:3f:8b:a4:2c:34:d9:35:
aa:d3:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:29 2026 by rpki-client